{"as_of":"2026-08-17T20:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f07cec171a607d22bc5c8a78f182e41ede3a4e70b78ae0430168a57654f85b1d","coverage":[{"denominator":11,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":11,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T15:24:45.783395Z","state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2501.14122/citation-record","integrity":"/paper/2501.14122/integrity","json":"/paper/2501.14122/citation-record.json","paper":"/paper/2501.14122"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:24:46.058322Z","title":"In 2016 IEEE European symposium on security and privacy (EuroS&P), 372–387","venue":null,"work_id":"4d309311-2ce9-4267-a326-52f1d076c3ff","year":2016},"citing_paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T15:24:45.750046Z"},"links":{"citing_paper":"/paper/2501.14122"},"observation_digest":"sha256:1be1906ac6f3ea37f593a39c6c9437c165751eb9762118f6dfdbf47239aebace","observation_id":"27b0f057-f158-48f1-a935-a2c2d7f9238d","resolution":{"observed_at":"2026-08-10T15:24:46.064461Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1406.1831","last_updated":"2014-06-06T22:49:11Z","snapshot_observed_at":"2026-08-14T23:31:14.385210Z","submitted_at":"2014-06-06T22:49:11Z","title":"Analyzing noise in autoencoders and deep networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1406.1831","snapshot_observed_at":"2026-08-10T15:24:45.762612Z","title":"arXiv preprint arXiv:1406.1831","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T15:24:45.762612Z"},"links":{"cited_paper":"/paper/1406.1831","citing_paper":"/paper/2501.14122"},"observation_digest":"sha256:57cf44759f84378e87e4a059b468183dcd3e2aba96fb23814c47c904898732f7","observation_id":"f6ee7e7e-bab8-4524-9ab3-2eceb02170ba","resolution":{"observed_at":"2026-08-10T15:24:45.762612Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-10T15:24:45.783395Z","title":"arXiv preprint arXiv:1312.6199","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters","version":2},"reference_index":2013,"source":"pdf_text","source_observed_at":"2026-08-10T15:24:45.783395Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2501.14122"},"observation_digest":"sha256:959609f3d9426fbfc7729c352ee9b37c0fc497f41b8d7660464ca5a4dbfa6546","observation_id":"5c28fbb7-7bf7-4e5b-a39b-9c8a9e895667","resolution":{"observed_at":"2026-08-10T15:24:45.783395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-10T15:24:45.725191Z","title":"arXiv preprint arXiv:1412.6572","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters","version":2},"reference_index":2014,"source":"pdf_text","source_observed_at":"2026-08-10T15:24:45.725191Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2501.14122"},"observation_digest":"sha256:0cb9c0866d6c71fb64b68e9c29659a722ab6dd0a57c0fddafdecabebc5477c75","observation_id":"fe688d67-f100-4e24-8e34-7dff95158e4b","resolution":{"observed_at":"2026-08-10T15:24:45.725191Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1511.06807","last_updated":"2015-11-21T01:11:29Z","snapshot_observed_at":"2026-08-14T22:21:57.367952Z","submitted_at":"2015-11-21T01:11:29Z","title":"Adding Gradient Noise Improves Learning for Very Deep Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.06807","snapshot_observed_at":"2026-08-10T15:24:45.742703Z","title":"arXiv preprint arXiv:1511.06807","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters","version":2},"reference_index":2015,"source":"pdf_text","source_observed_at":"2026-08-10T15:24:45.742703Z"},"links":{"cited_paper":"/paper/1511.06807","citing_paper":"/paper/2501.14122"},"observation_digest":"sha256:699281a0bc11bf4b7aa058df9f3608066dff6eab84f3c34bb659d0a772521244","observation_id":"d5c90d16-1753-49fb-94a8-9021bf6cdb08","resolution":{"observed_at":"2026-08-10T15:24:45.742703Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-17T02:26:19.835254Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-10T15:24:45.732403Z","title":"arXiv preprint arXiv:1611.01236","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters","version":2},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-10T15:24:45.732403Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/2501.14122"},"observation_digest":"sha256:11b368388e13e58ea0e492f69b3aa81da85e210f8e60d8940246a12228fb0f0b","observation_id":"5e536986-3dd6-4595-8215-09e1e5fc3f33","resolution":{"observed_at":"2026-08-10T15:24:45.732403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:24:46.038543Z","title":"In 2017 Chinese automa- tion congress (CAC), 4165–4170","venue":null,"work_id":"124b2a26-d8ff-4664-99ec-c030e8227339","year":2017},"citing_paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters","version":2},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-10T15:24:45.771060Z"},"links":{"citing_paper":"/paper/2501.14122"},"observation_digest":"sha256:47fe7ba6ddfc14968be0dc8fb511910ae24798c0c991938c3924a98860d84bfb","observation_id":"19947c60-394a-451d-bc13-cacdeaffb7e0","resolution":{"observed_at":"2026-08-10T15:24:46.043166Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1810.00069","last_updated":"2018-09-28T20:09:04Z","snapshot_observed_at":"2026-08-14T18:21:52.839505Z","submitted_at":"2018-09-28T20:09:04Z","title":"Adversarial Attacks and Defences: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.00069","snapshot_observed_at":"2026-08-10T15:24:45.711818Z","title":"arXiv preprint arXiv:1810.00069","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters","version":2},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-10T15:24:45.711818Z"},"links":{"cited_paper":"/paper/1810.00069","citing_paper":"/paper/2501.14122"},"observation_digest":"sha256:cf0d54239f00764289b83755bf0fd0dcd89be7cf2d29a888bab7a39975cafe42","observation_id":"7338a782-9a34-4868-b513-495799d35a19","resolution":{"observed_at":"2026-08-10T15:24:45.711818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.02398","last_updated":"2020-02-15T03:51:45Z","snapshot_observed_at":"2026-08-17T13:59:28.135483Z","submitted_at":"2019-06-06T03:49:00Z","title":"Query-efficient Meta Attack to Deep Neural Networks","version":3},"cited_work":{"arxiv_id":"1906.02398","doi":null,"metadata_source":"pith","pith_arxiv_id":"1906.02398","snapshot_observed_at":"2026-08-10T15:24:45.970069Z","title":"Query-efficient Meta Attack to Deep Neural Networks","venue":"cs.CV","work_id":"edb2d32f-d4bb-4de5-a74e-74bc9dc8823b","year":2019},"citing_paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters","version":2},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-10T15:24:45.718154Z"},"links":{"cited_paper":"/paper/1906.02398","citing_paper":"/paper/2501.14122"},"observation_digest":"sha256:2de5636477ba4b59cb1b710f0263cbe35f2286b51162aa352ac30f39a954926d","observation_id":"8d1a3c5f-d70c-41aa-be6a-3342d938a209","resolution":{"observed_at":"2026-08-10T15:24:45.977753Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:24:46.021796Z","title":"In Proceedings of the Web Conference 2020, 673–683","venue":null,"work_id":"ace5d9b5-dd28-4359-a099-7fbd33f06cff","year":2020},"citing_paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters","version":2},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-10T15:24:45.778378Z"},"links":{"citing_paper":"/paper/2501.14122"},"observation_digest":"sha256:367129e68163c7f6e89d5fef2d8337f3d9f1fec630e020643416f12cc500deb3","observation_id":"381c5a81-719b-4676-bce6-80a8a252c385","resolution":{"observed_at":"2026-08-10T15:24:46.026886Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.02236","last_updated":"2022-02-04T17:03:32Z","snapshot_observed_at":"2026-08-16T17:23:34.416128Z","submitted_at":"2022-02-04T17:03:32Z","title":"Pixle: a fast and effective black-box attack based on rearranging pixels","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.02236","snapshot_observed_at":"2026-08-10T15:24:45.754980Z","title":"arXiv preprint arXiv:2202.02236","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-10T15:24:45.754980Z"},"links":{"cited_paper":"/paper/2202.02236","citing_paper":"/paper/2501.14122"},"observation_digest":"sha256:6369cd4865ac92063abb37057f5e9e15adb8f92ecf789e13de4e2107b132962e","observation_id":"be497ad9-7c27-4e26-bd56-ad21472ce62a","resolution":{"observed_at":"2026-08-10T15:24:45.754980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2501.14122","last_updated":"2025-04-15T08:15:08Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-17T19:58:58.731862Z","submitted_at":"2025-01-23T22:36:06Z","title":"Reinforcement Learning Platform for Adversarial Black-box Attacks with Custom Distortion Filters"},"reference_resolution":{"displayed":11,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":7,"verified_exact":0,"verified_fuzzy":3},"total_outbound_references":11},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 11 of 11 outbound references and 0 inbound Pith citation observations for arXiv:2501.14122."}